Skip to content

Commit 559a043

Browse files
committed
ci(reusable-update-flake-lock): Remove GPG passphrase option
`nix flake update --commit-lock-file` does not have a way to provide a passphrase to GPG.
1 parent a710f3d commit 559a043

File tree

2 files changed

+3
-6
lines changed

2 files changed

+3
-6
lines changed

.github/workflows/reusable-update-flake-lock.yml

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -39,9 +39,6 @@ on:
3939
GIT_GPG_SIGNING_SECRET_KEY:
4040
description: GPG secret key used to sign commits
4141
required: false
42-
GIT_GPG_SIGNING_PASSPHRASE:
43-
description: GPG passphrase for secret key
44-
required: false
4542

4643
outputs:
4744
pr-url:
@@ -82,15 +79,16 @@ jobs:
8279
if: ${{ inputs.sign-commits }}
8380
env:
8481
GIT_GPG_SIGNING_SECRET_KEY: ${{ secrets.GIT_GPG_SIGNING_SECRET_KEY }}
85-
GIT_GPG_SIGNING_PASSPHRASE: ${{ secrets.GIT_GPG_SIGNING_PASSPHRASE }}
8682
run: |
8783
echo "$GIT_GPG_SIGNING_SECRET_KEY" \
8884
| gpg --batch --yes \
8985
--pinentry-mode loopback \
90-
--passphrase "$GIT_GPG_SIGNING_PASSPHRASE" \
9186
--import
9287
git config --local user.signingkey "${{ vars.GIT_GPG_SIGNING_KEY_ID }}"
9388
89+
- name: View flake config
90+
run: nix config show
91+
9492
- name: Run `nix flake update`
9593
id: update-lockfile
9694
run: |

.github/workflows/update-flake-lock.yml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,6 @@ jobs:
1717
CREATE_PR_APP_ID: ${{ secrets.CREATE_PR_APP_ID }}
1818
CREATE_PR_APP_PRIVATE_KEY: ${{ secrets.CREATE_PR_APP_PRIVATE_KEY }}
1919
GIT_GPG_SIGNING_SECRET_KEY: ${{ secrets.GIT_GPG_SIGNING_SECRET_KEY }}
20-
GIT_GPG_SIGNING_PASSPHRASE: ${{ secrets.GIT_GPG_SIGNING_PASSPHRASE }}
2120
with:
2221
runner: '["self-hosted", "Linux", "x86-64-v2"]'
2322
sign-commits: true

0 commit comments

Comments
 (0)